YAWAST is a web application penetration testing toolkit that can perform information gathering and basic…

What is Legion Legion is a semi-automated easy to use network penetration testing framework that…

XSStrike is an open source tool that detects Cross Site Scripting vulnerabilities and exploits them. …

cSploit is now considered EOL and is not being updated by the developers. Current version…

What is JFScan? JFScan is a great enumeration tool  created by nullt3r written mainly in…

Wapiti is an open source tool that scans web applications for multiple vulnerabilities including data…

SniffAir is an open source tool made for sophisticated wireless attacks and data capture, it…

DNSRecon is a python script used for DNS information gathering.  DNS information about a target…

Got a huge list of targets that you’d like to enumerate but can’t really visit…

Getallurls (gau) fetches known URLs from AlienVault’s, the Wayback Machine, and Common Crawl for any…

Today, we talk about SSLyze. SSLyze is a Python tool that can analyze the SSL…

Phishing is a classic favorite attack of hackers. Not only that it provides easy access…